{
  "osquery_time": "1592478128",
  "datetime": "2020-06-17T14:37:58.3256510Z",
  "source": "Application",
  "provider_name": "ESENT",
  "provider_guid": "",
  "event_id": "302",
  "task_id": "3",
  "level": "4",
  "keywords": "0x80000000000000",
  "data": "{\"EventData\":[\"svchost\",\"4228,U,98\",\"DS_Token_DB: \"]}",
  "computer_name": "DESKTOP-4AR7BIA"
}
